Question & Answer
Question
What is the interval at which the request is made from the QRadar Event Collector to Microsoft® Office 365?
Can I change the interval somehow?
Answer
The Office 365 RestAPI protocol has a polling interval set to 1 minute by default. If the protocol fails to connect, the interval increments, maxing out at 15 minutes. Once the connection is restored, the interval decrements the interval back to 1 minute.
Currently, there is no way to change this interval.
[{"Type":"SW","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwt0AAA","label":"Log Source"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)"}]
Was this topic helpful?
Document Information
Modified date:
17 May 2021
UID
ibm16451153